Fake installation pages Claude Code spreads infostealer

Back Techzine.Eu

Fake installation pages Claude Code spreads infostealer

Techzine.Eu • March 6, 2026

Share: View original

Attackers clone Claude Code installation pages and distribute the Amatera Stealer via Google results.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake Claude Code Downloads Spread Infostealer Malware Targeting Developers Cybercriminals are exploiting fake download pages that impersonate Claude Code, a legitimate AI coding assistant, to distribute infostealer malware. Developers and IT professionals are particularly at risk as they may unknowingly download these malicious packages, leading to potential data theft and system compromise. 21 sources 64

Extracted Entities

Attack Types (1)

Malware (1)

Amatera Stealer